Prompt lesson · 24 prompts
Data Governance and Compliance prompts for Chief Digital Officers (CDOs)
24 ready-to-use prompts from our AI for Chief Digital Officers (CDOs) course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Data Sensitivity Classification
Use this when you need to classify data as sensitive, personal, or confidential and understand the reasoning.
Role You are a data governance expert who helps classify data based on sensitivity and explains the reasoning to support compliance.
Context you provide
- {{data_sample}}: The data or dataset to classify (e.g., customer email addresses, a document, a dataset).
- {{classification_criteria}}: Any specific criteria or standards to use (e.g., GDPR, internal policy). If not provided, you will use common standards.
Instructions
- If the data sample is missing, ask for it before proceeding.
- Analyze the provided data and classify each item or category as sensitive, personal, confidential, or public.
- For each classification, explain the reasoning based on relevant regulations (e.g., GDPR, HIPAA) and common practices.
- If the user provides criteria, apply them; otherwise, state the criteria you used.
- Highlight any data that may fall under multiple classifications and explain the implications.
Output format Provide a structured response with a table or list showing: Data Item, Classification, Reasoning, and Potential Risks. Use clear headings and bullet points. Keep the tone professional and educational.
Guardrails
- Do not claim to provide legal advice; suggest consulting a legal expert for definitive rulings.
- Flag any assumptions about the data's origin or applicable regulations.
- Stay focused on classification and reasoning, not on remediation steps.
Example Data sample: customer email addresses; Criteria: GDPR.
Open this prompt Analysis · Intermediate
Data Privacy Policy Drafting
Use this when you need to draft, review, or summarize data privacy policies for compliance with regulations like GDPR or CCPA.
Role You are a data privacy and compliance expert. Your role is to help draft, review, and summarize data privacy policies, ensuring alignment with regulations like GDPR, CCPA, and others, while balancing legal accuracy and user readability.
Context you provide
- {{regulation}} – the specific privacy regulation(s) to address (e.g., GDPR, CCPA, or a combination)
- {{jurisdiction}} – the geographic region or business operations scope (e.g., California, EU, global)
- {{policy_section}} – optional: the particular section of the policy you need help with (e.g., data subject rights, consent, data retention)
- {{audience}} – the target audience for the policy (e.g., users, employees, B2B clients)
Instructions
- If any of the required context is missing, ask for it before proceeding.
- Based on the provided regulation and jurisdiction, summarize the key principles that must be included in a privacy policy.
- Identify specific provisions that apply to the given jurisdiction and policy section.
- Provide best practices for obtaining user consent, writing clear language, and avoiding common pitfalls.
- Optionally, draft a sample policy section in plain language suitable for the specified audience.
Output format Present the information in a structured report with sections: Key Principles, Jurisdiction-Specific Provisions, Best Practices, and Draft Policy Section (if requested). Use clear headings and bullet points. Keep the tone professional and accessible.
Guardrails Do not invent legal requirements; base all advice on widely recognized regulations. Flag any assumptions about the user's current policy or business model. Stay within the scope of privacy policy drafting and compliance; do not provide general legal advice.
Example {{regulation}} = "GDPR and CCPA", {{jurisdiction}} = "California and EU", {{policy_section}} = "User Consent", {{audience}} = "website visitors"
Open this prompt Writing · Intermediate
Data Access Controls Implementation Plan
Use this when you need a step-by-step plan to implement robust access controls and permissions for sensitive data across user roles.
Open this prompt Planning · Intermediate
Develop Data Retention Policies
Use this when you need to design or refine data retention policies that balance legal compliance, risk management, and operational efficiency.
Open this prompt Planning · Intermediate
Data Quality Management Framework
Use this when you need to establish metrics, processes, and tools for maintaining data quality and integrity.
Open this prompt Analysis · Intermediate
Data Quality Management Plan
Use this when you need to establish data quality standards, identify issues, validate data, and recommend automation tools.
Open this prompt Planning · Advanced
Data Breach Response Plan Development
Use this when you need to develop or improve a comprehensive incident response plan for data breaches.
Open this prompt Planning · Advanced
Data Governance Framework Design
Use this when you need to create or refine a comprehensive data governance framework that defines roles, policies, and processes for managing data assets.
Open this prompt Planning · Intermediate
Design Data Governance Framework
Use this when you need to design or improve a data governance framework that defines roles, responsibilities, and processes for managing data assets.
Open this prompt Planning · Advanced
Compliance Monitoring and Risk Assessment
Use this when you need to monitor data usage for compliance with regulations, identify risks, and generate reports.
Open this prompt Analysis · Intermediate
Data Anonymization Best Practices and Guidance
Use this when you need a comprehensive overview of data anonymization methods, legal considerations, and best practices for protecting sensitive information.
Open this prompt Research · Intermediate
Data Governance Training Content Development
Use this when you need to create engaging data governance training materials for employees.
Open this prompt Creating · Intermediate
Vendor Data Governance and Compliance Checklist
Use this when you need to evaluate and select third-party vendors based on their data governance and compliance practices.
Open this prompt Planning · Intermediate
Vendor Management and Compliance Assessment
Use this when you need to assess third-party vendors' data governance and privacy practices and manage vendor risk.
Open this prompt Analysis · Intermediate
Data Breach Notification Template and Compliance Guide
Use this when you need to draft a comprehensive data breach notification for affected individuals and regulatory authorities, ensuring compliance with relevant regulations such as GDPR, CCPA, or HIPAA.
Open this prompt Writing · Intermediate
Define Data Governance KPIs and Reports
Use this when you need to define and track data governance KPIs, generate metric reports, and benchmark against industry standards.
Open this prompt Analysis · Intermediate
Data Governance Communication Strategy
Use this when you need to create a communication strategy to promote data governance and compliance initiatives within your organization.
Open this prompt Communication · Intermediate
Data Classification System Design
Use this when you need to develop a data classification and labeling system for sensitivity and compliance.
Open this prompt Planning · Advanced
Privacy Impact Assessment Framework
Use this when you need a structured privacy impact assessment before launching or changing a data processing activity.
Open this prompt Analysis · Advanced
Consent Management System Guide
Use this when you need to understand, implement, or document consent management processes for data processing activities.
Open this prompt Planning · Intermediate
Data Breach Response Plan
Use this when you need to develop a comprehensive, step-by-step response plan for handling a data breach, from detection through notification and post-incident review.
Open this prompt Planning · Intermediate
Evaluate Data Anonymization Methods
Use this when you need to understand and select data anonymization techniques for protecting individual privacy while maintaining data utility.
Open this prompt Learning · Intermediate
Develop Compliance Training Programs
Use this when you need to create engaging compliance training materials and awareness campaigns for employees.
Open this prompt Creating · Intermediate
Regulatory Change Monitoring
Use this when you need to monitor and track regulatory changes affecting your data governance and compliance.
Open this prompt Research · Advanced